This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json) Hash identifier: NsgzW/PkCDaPDVqLa8tD4VSiOFn1LOoYUbtkipNpTYU= Subject key identifier: 2B:06:F6:8C:82:0C:E8:7A:B0:7A:A3:35:A4:27:11:64:59:B6:A2:38 Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Certificate serial: 019B37C5EC49978FABB62D170C625914B487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 18:01:16 +0000 Manifest this update: Fri 19 Dec 2025 18:01:16 +0000 Manifest next update: Sat 20 Dec 2025 18:01:16 +0000 Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=) 2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=) 3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: 45268nVLj4VKH69ylTaW97/sJWOasNnvA5tZA6rptN0=) 4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=) 5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ec:49:97:8f:ab:b6:2d:17:0c:62:59:14:b4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Validity Not Before: Dec 19 18:01:16 2025 GMT Not After : Dec 20 18:01:16 2025 GMT Subject: CN=2b06f68c820ce87ab07aa335a427116459b6a238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:47:2b:98:b6:81:b2:e1:46:04:99:de:19: c0:52:ab:cb:e6:92:de:2b:d9:3d:bf:cf:c5:7e:c0: 9b:55:b2:b1:f7:13:df:b6:13:0a:cb:4c:73:c8:27: 33:39:c6:8a:25:a4:db:17:da:b2:17:18:f8:05:0e: 88:c7:66:aa:63:09:eb:0e:70:16:a6:36:ad:f6:72: 1c:96:ee:f2:a3:3a:64:21:31:9e:3a:f1:c1:d4:b2: b5:cc:95:51:30:dd:a7:e3:69:fe:30:80:b5:fa:46: 1d:df:3f:59:84:ca:f1:91:a1:60:54:8c:a2:bc:23: d2:4f:9c:5f:ce:19:1b:0d:75:ed:20:6f:e2:1f:de: 08:9b:06:2f:06:14:4a:2b:53:b4:18:56:ed:a8:07: 2c:f6:15:81:6c:59:0d:37:5b:eb:f7:df:f8:35:8e: 20:cc:86:40:45:49:93:ca:35:b1:ee:9b:f9:07:ee: 63:c1:57:03:68:5b:a1:cf:a9:ec:11:7c:aa:a2:0b: ce:d2:aa:a9:83:56:7d:d8:ea:28:66:c0:4b:0f:93: 62:ba:d0:a4:49:53:20:cb:00:25:ce:04:aa:a7:e9: cc:96:22:b2:ea:ed:ac:8a:93:30:b5:29:23:79:45: d6:53:7e:78:ba:19:b9:76:e3:60:fd:b3:e3:ee:4b: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:F6:8C:82:0C:E8:7A:B0:7A:A3:35:A4:27:11:64:59:B6:A2:38 X509v3 Authority Key Identifier: keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b7:b6:3d:bd:11:7c:97:78:ea:c3:00:c1:e8:2a:31:bb:67: 19:3e:30:90:56:05:e6:f8:7f:00:ac:25:7f:54:10:39:03:a3: 8e:78:f4:86:e8:c3:e6:07:b5:a9:a3:69:77:2d:4d:68:72:53: 89:8f:94:6f:10:eb:0a:78:ed:6c:d0:b2:30:94:0e:15:7d:13: d5:19:f8:fb:7c:59:6d:49:14:8c:1f:32:37:7c:54:d5:7b:73: 63:0c:bc:6e:2f:db:0f:6a:97:a4:5c:df:04:93:ab:cb:42:11: bd:21:f0:07:c3:73:4f:02:d1:57:95:a7:34:2e:66:8b:26:ba: cc:81:e1:6e:6c:35:ba:64:02:cf:29:dd:d0:46:aa:2f:57:9d: 2a:5e:50:db:f8:6a:f8:c4:db:ee:9a:a6:42:2e:56:15:a0:95: 83:a1:83:a9:90:e9:a9:19:10:13:68:5a:5c:40:be:01:22:2a: 32:aa:69:c7:db:01:b7:87:dc:87:f3:b7:67:f4:5f:49:33:80: 8c:cd:4f:81:be:58:8b:89:bd:23:d5:97:57:c3:70:5f:0f:32: 57:03:ab:d1:c4:50:8a:e1:91:b6:e3:12:83:68:fe:59:12:68: d0:b1:45:67:ea:44:08:86:a9:58:09:b4:a6:52:4b:89:11:ba: 42:3f:c4:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xexJl4+rti0XDGJZFLSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy YTgxZWEwHhcNMjUxMjE5MTgwMTE2WhcNMjUxMjIwMTgwMTE2WjAzMTEwLwYDVQQD EygyYjA2ZjY4YzgyMGNlODdhYjA3YWEzMzVhNDI3MTE2NDU5YjZhMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtndHK5i2gbLhRgSZ3hnAUqvL5pLe K9k9v8/FfsCbVbKx9xPfthMKy0xzyCczOcaKJaTbF9qyFxj4BQ6Ix2aqYwnrDnAW pjat9nIclu7yozpkITGeOvHB1LK1zJVRMN2n42n+MIC1+kYd3z9ZhMrxkaFgVIyi vCPST5xfzhkbDXXtIG/iH94ImwYvBhRKK1O0GFbtqAcs9hWBbFkNN1vr99/4NY4g zIZARUmTyjWx7pv5B+5jwVcDaFuhz6nsEXyqogvO0qqpg1Z92OooZsBLD5NiutCk SVMgywAlzgSqp+nMliKy6u2sipMwtSkjeUXWU354uhm5duNg/bPj7ks2XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsG9oyCDOh6sHqjNaQnEWRZtqI4MB8GA1UdIwQY MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1 LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7e2Pb0R fJd46sMAwegqMbtnGT4wkFYF5vh/AKwlf1QQOQOjjnj0hujD5ge1qaNpdy1NaHJT iY+UbxDrCnjtbNCyMJQOFX0T1Rn4+3xZbUkUjB8yN3xU1XtzYwy8bi/bD2qXpFzf BJOry0IRvSHwB8NzTwLRV5WnNC5miya6zIHhbmw1umQCzynd0EaqL1edKl5Q2/hq +MTb7pqmQi5WFaCVg6GDqZDpqRkQE2haXEC+ASIqMqppx9sBt4fch/O3Z/RfSTOA jM1Pgb5Yi4m9I9WXV8NwXw8yVwOr0cRQiuGRtuMSg2j+WRJo0LFFZ+pECIapWAm0 plJLiRG6Qj/ELA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:52:29 2025 by rpki-client